vShield API Programming Guide
94 VMware, Inc.
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:pattern value="((psk)|(x.509))"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element minOccurs="0" name="preSharedKey" type="VpnPreSharedKey" /> <!-- Requried
only when authenticationMode='psk' And peerIPAddress!='any' -->
<xs:element name="encryptionAlgorithm" type="VpnEncryptionAlgo" />
<xs:element minOccurs="0" name="enablePfs" type="xs:boolean" /> <!-- Default will be
true -->
<xs:element minOccurs="0" name="dhGroup" type="DhGroup" /> <!-- Default will be DH2 -->
<xs:element minOccurs="0" name="mtu" type="Mtu" /> <!--Default is that of the uplink
interface of the Appliance -->
<xs:element minOccurs="0" name="stats" type="IpsecVpnSiteStats" /> <!-- Only in
Response -->
</xs:sequence>
</xs:complexType>
<xs:simpleType name="VpnEncryptionAlgo">
<xs:restriction base="xs:string">
<xs:pattern value="aes|aes256|3des"/>
</xs:restriction>
</xs:simpleType>
<xs:simpleType name="DhGroup">
<xs:restriction base="xs:string">
<xs:pattern value="dh2|dh5"/>
</xs:restriction>
</xs:simpleType>
<xs:complexType name="IpsecVpnSiteStats"> <!-- Only in Response -->
<xs:sequence>
<xs:element name="siteStatus" >
<xs:simpleType>
<xs:restriction base="xs:string">
<xs:pattern value="green|yellow|red"/>
</xs:restriction>
</xs:simpleType>
</xs:element>
<xs:element name="txBytesFromSite" type="xs:unsignedLong"/>
<xs:element name="rxBytesOnSite" type="xs:unsignedLong"/>
<xs:element name="ikeStatus" type="IpsecVpnSiteIkeStatus"/>
<xs:element name="tunnelStats" type="IpsecVpnTunnelStats" minOccurs="0"
maxOccurs="unbounded" />
</xs:sequence>
</xs:complexType>
<xs:complexType name="IpsecVpnSiteIkeStatus"> <!-- Only in Response -->
<xs:sequence>
<xs:element name="channelStatus" type="ServiceStatus"/>
<xs:element name="channelState" type="xs:string"/>
<xs:element name="lastInformationalMessage" type="xs:string"/>
<xs:element name="localIpAddress" type="xs:string"/>
<xs:element name="peerId" type="xs:string"/>
<xs:element name="remoteIpAddress" type="xs:string"/>
</xs:sequence>
</xs:complexType>
<xs:complexType name="IpsecVpnTunnelStats"> <!-- Only in Response -->
<xs:sequence>
<xs:element name="tunnelStatus" type="ServiceStatus"/>
<xs:element name="tunnelState" type="xs:string"/>
<xs:element name="lastInformationalMessage" type="xs:string"/>
<xs:element name="localSubnet" type="Cidr" />
<xs:element name="peerSubnet" type="Cidr" />
<xs:element name="encryptionAlgorithm" type="xs:string"/>
<xs:element name="authenticationAlgorithm" type="xs:string" />
Komentarze do niniejszej Instrukcji